Skip to main content
IndicatorPublished 07/11/2026Updated 08/04/2026

Malicious SHA-256 file hash 1dee09494417… (OffSeq Mirage)

Source OffSeq Mirage

Description

OffSeq Mirage honeypot sensors observed this SHA-256 file hash 409 time(s) in attacker activity between 2026-07-11 and 2026-08-04. Observed technique: T1105 (Ingress Tool Transfer). Seen from attacker infrastructure in GB. File hashes fingerprint a specific malicious payload (a dropper, web shell, miner, or post-exploitation tool) that was staged or delivered during the attack. Match it against files in your environment and your EDR/AV and threat-intel feeds.

Indicators of compromise

Hashes 1

  • 1dee0949441736015e60e2f4589a8855dbd19fcf9387946cf20ef2fed246ad7aOffSeq Mirage — a malicious file, observed 2026-07-11..2026-08-04, 409×

References